Public bug reported:

Using mailman 2.1.39 with the recent fixes for bug 1961762 applied on
top. [1] [2]

A user has noticed the following behavior on our list with
private_roster = 1 (List members): [3]

==========================
When using the Remind button:

"If you are a list member, your password has been emailed to you." is
only displayed when the entered email is on the list.

The same thing happens with the Unsubscribe button, "If you are a list member, 
a confirmation email has been sent." is only displayed when the entered email 
is on the list.
==========================

[1] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1887
[2] https://bazaar.launchpad.net/~mailman-coders/mailman/2.1/revision/1888
[3] https://bugs.archlinux.org/task/74424

** Affects: mailman
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1968443

Title:
  Membership information leak through options page

To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1968443/+subscriptions

_______________________________________________
Mailman-coders mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/mailman-coders.python.org/
Member address: [email protected]

Reply via email to